Skip to content
OpenAdvisories

Package · npm

@papra/webhooks

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.5
    CVE-2026-48051

    Papra: SSRF via HTTP redirect bypass in webhook delivery

    Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to inte…

    papra-hq papra @papra/webhooks npm